$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/a977d35e-7266-30b6-99bf-a0b44b910566.roa File: a977d35e-7266-30b6-99bf-a0b44b910566.roa (raw, json) Hash identifier: cTQwH7/YREdO/uVUM1IIyxgmVY9ZM4OkY0p7bU72yew= Subject key identifier: D1:B0:38:C2:CA:4E:B2:15:99:4F:E0:08:58:64:AB:01:3A:38:10:F6 Certificate issuer: /CN=4d6b4eca-7a87-4187-a148-4e7798b97016 Certificate serial: 010D0C9F4328584EF01CD13D20D4925CB0D21540 Authority key identifier: 48:77:84:9A:55:A4:FE:44:A7:CC:83:FF:88:AF:3F:A7:1D:D8:B4:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/a977d35e-7266-30b6-99bf-a0b44b910566.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 174 IP address blocks: 23.148.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/4d6b4eca-7a87-4187-a148-4e7798b97016.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/4d6b4eca-7a87-4187-a148-4e7798b97016.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:d1:3d:20:d4:92:5c:b0:d2:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d6b4eca-7a87-4187-a148-4e7798b97016 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=f78a17d2-2ff1-4a4e-9f48-84b80d009b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:90:01:87:91:38:11:2b:37:14:58:43:45: 99:71:0b:e1:a1:b5:6d:54:ab:91:1f:25:bf:9a:16: 20:8f:d5:16:ec:b4:d8:65:c0:32:c3:36:65:27:4f: 10:89:2e:78:ef:6e:a2:cf:b2:fb:10:5a:7f:c4:16: ca:ae:69:2c:5d:bf:c4:22:2d:63:9a:4e:80:6f:da: c0:56:bb:40:bc:10:55:29:bf:5a:e0:25:22:a2:f7: 23:8d:1e:7f:24:9a:cc:f4:74:35:a2:fc:0c:49:a2: c4:0c:fd:92:4d:89:e9:50:3d:b7:42:50:85:ca:fc: 51:39:cf:63:c1:1e:7f:a2:69:69:46:39:b9:de:d3: 1b:c3:9d:0b:a8:11:ba:4b:f8:48:06:bb:0f:ef:15: e4:67:b5:a7:b0:c0:94:ed:de:39:99:42:9e:9d:02: de:33:f1:3b:5e:cb:0c:5a:02:e4:8a:59:31:1d:ee: 6c:8e:5c:4f:06:03:bb:73:3d:ac:a9:44:b7:1d:fa: 00:e2:cc:45:f7:8c:95:eb:89:12:26:45:ac:a5:d4: 30:f5:35:14:c6:99:b3:40:70:18:5d:9f:75:ed:4b: 30:ab:51:19:9f:5d:13:e6:64:33:9b:f8:29:43:2b: 68:a4:8d:ab:55:39:84:59:dd:c1:73:3f:a4:e8:e8: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B0:38:C2:CA:4E:B2:15:99:4F:E0:08:58:64:AB:01:3A:38:10:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/a977d35e-7266-30b6-99bf-a0b44b910566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016/4d6b4eca-7a87-4187-a148-4e7798b97016.crl X509v3 Authority Key Identifier: keyid:48:77:84:9A:55:A4:FE:44:A7:CC:83:FF:88:AF:3F:A7:1D:D8:B4:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4d6b4eca-7a87-4187-a148-4e7798b97016.cer sbgp-ipAddrBlock: critical IPv4: 23.148.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b6:62:b3:20:9b:1d:45:c7:ad:e8:4c:f1:2d:62:66:d0:d7: db:d4:3b:b7:28:20:c8:35:88:5d:0a:7e:a1:d0:1e:ca:b4:90: 68:ac:4d:9f:a5:2a:f3:80:b0:fe:56:e8:a3:9d:60:f2:d3:3b: d2:f7:d9:26:1f:af:14:3c:62:f2:77:0f:0d:50:5a:26:9c:45: 0d:99:d1:3d:e9:1f:89:64:e7:c6:db:2b:0e:22:4a:37:58:e2: 81:50:b6:21:ba:da:a4:0d:ae:48:ea:84:51:aa:76:8d:69:63: 9d:ff:41:30:6d:75:7e:c6:58:1c:da:66:b0:67:3d:5f:d2:a5: cc:ea:e7:33:07:41:15:5a:c8:9e:8a:e5:a2:54:25:93:cb:3d: f6:41:a6:99:39:59:2e:46:76:80:d9:b6:4f:23:9b:da:9b:c6: bc:c8:46:0d:2a:7b:1d:1c:e1:71:82:7b:2a:8f:dd:ba:b3:10: 3b:2a:28:a4:66:d1:b0:29:59:21:fa:45:61:c0:bf:2e:22:af: ae:b9:27:59:2c:da:fa:66:be:ca:dd:b8:87:1e:b6:f8:b7:80: 52:a1:de:87:f5:4c:b2:4c:f9:5e:46:db:7f:59:ab:f6:67:71: 5c:0b:89:1d:8e:f0:b3:b1:14:68:ae:e5:33:6f:fd:05:11:ea: 82:a8:bd:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNE9INSSXLDSFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ2YjRlY2EtN2E4Ny00MTg3LWExNDgtNGU3Nzk4Yjk3 MDE2MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk Zjc4YTE3ZDItMmZmMS00YTRlLTlmNDgtODRiODBkMDA5YjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8GQAYeROBErNxRYQ0WZcQvhobVtVKuRHyW/ mhYgj9UW7LTYZcAywzZlJ08QiS54726iz7L7EFp/xBbKrmksXb/EIi1jmk6Ab9rA VrtAvBBVKb9a4CUiovcjjR5/JJrM9HQ1ovwMSaLEDP2STYnpUD23QlCFyvxROc9j wR5/omlpRjm53tMbw50LqBG6S/hIBrsP7xXkZ7WnsMCU7d45mUKenQLeM/E7XssM WgLkilkxHe5sjlxPBgO7cz2sqUS3HfoA4sxF94yV64kSJkWspdQw9TUUxpmzQHAY XZ917Uswq1EZn10T5mQzm/gpQytopI2rVTmEWd3Bcz+k6OjmjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGwOMLKTrIVmU/gCFhkqwE6OBD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZDZi NGVjYS03YTg3LTQxODctYTE0OC00ZTc3OThiOTcwMTYvYTk3N2QzNWUtNzI2Ni0z MGI2LTk5YmYtYTBiNDRiOTEwNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGQ2YjRlY2EtN2E4Ny00MTg3LWEx NDgtNGU3Nzk4Yjk3MDE2LzRkNmI0ZWNhLTdhODctNDE4Ny1hMTQ4LTRlNzc5OGI5 NzAxNi5jcmwwHwYDVR0jBBgwFoAUSHeEmlWk/kSnzIP/iK8/px3YtLcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZDZiNGVjYS03YTg3LTQxODctYTE0OC00ZTc3 OThiOTcwMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5REMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACu2YrMgmx1Fx63oTPEtYmbQ19vUO7coIMg1iF0KfqHQHsq0kGisTZ+l KvOAsP5W6KOdYPLTO9L32SYfrxQ8YvJ3Dw1QWiacRQ2Z0T3pH4lk58bbKw4iSjdY 4oFQtiG62qQNrkjqhFGqdo1pY53/QTBtdX7GWBzaZrBnPV/Spczq5zMHQRVayJ6K 5aJUJZPLPfZBppk5WS5GdoDZtk8jm9qbxrzIRg0qex0c4XGCeyqP3bqzEDsqKKRm 0bApWSH6RWHAvy4ir665J1ks2vpmvsrduIcetvi3gFKh3of1TLJM+V5G239Zq/Zn cVwLiR2O8LOxFGiu5TNv/QUR6oKovd8= -----END CERTIFICATE-----Generated at Mon Sep 21 19:49:48 2026 by rpki-client